mirror of
https://github.com/google/nomulus
synced 2026-07-22 16:02:38 +00:00
gbrodman
a2f0035f89
There's a bit of a mismatch between the bit that parses the Java object and the bit that validates the XML. The parser parses the Java root node, however the validator follows the reference in a (valid) signature to *any* node, which can be hidden elsewhere. To fix this robustly: - Enforce that the XML signature Reference URI matches the root element ID precisely - Assert that exactly one <smd:signedMark> element exists in the DOM - Don't allow additional signed marks elsewhere in the XML just in case